CVE-2024-39153

Description

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/info_deal.php?mudi=del&dataType=news&dataTypeCN.

Affected Platforms

Weakness Type

CWE-352

References

• https://github.com/Thirtypenny77/cms2/blob/main/50/csrf.md
• https://github.com/Thirtypenny77/cms2/blob/main/50/csrf.md